This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/S2VsmEn5XWWuJUei_3StJEoji4c.roa File: S2VsmEn5XWWuJUei_3StJEoji4c.roa (raw, json) Hash identifier: l0k+krL5329LUL/NKt5yMEGbXxzmoOUQFl1xjcamtdQ= Subject key identifier: 4B:65:6C:98:49:F9:5D:65:AE:25:47:A2:FF:74:AD:24:4A:23:8B:87 Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346 Certificate serial: 019B7E38C3CFB98E01D02702F506F27D0C4D Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/S2VsmEn5XWWuJUei_3StJEoji4c.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200602 IP address blocks: 193.143.18.0/24 maxlen: 24 193.143.72.0/24 maxlen: 24 193.143.75.0/24 maxlen: 24 193.143.76.0/24 maxlen: 24 2a0f:8e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c3:cf:b9:8e:01:d0:27:02:f5:06:f2:7d:0c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b656c9849f95d65ae2547a2ff74ad244a238b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:79:4f:97:04:4f:d7:72:bc:b7:43:fe:4c: 31:7b:85:6c:fc:14:62:23:d4:5a:a0:ca:25:fc:b7: 43:01:5d:1b:9c:9a:7e:bd:27:9c:87:a8:48:d1:45: ac:31:bd:56:88:19:d9:78:47:60:a1:5d:db:d1:7a: aa:8b:66:44:73:1a:d3:5e:8d:2b:c4:32:14:7c:63: 56:34:c7:09:00:db:8a:ff:56:cf:cb:9d:6c:2b:24: 2e:6d:37:d1:b0:39:99:5b:57:eb:c6:0c:ef:f4:1e: aa:37:4a:c9:a1:a7:01:82:95:66:7f:05:72:55:5b: a3:02:ce:8d:3a:ae:79:b0:1b:e2:0b:87:75:57:c0: c5:f5:50:6a:f9:ba:94:e4:4b:aa:f1:9a:a5:f6:19: a4:cf:e7:8b:a4:a9:13:7e:82:e9:6b:89:63:9b:71: 5f:c9:df:99:1c:aa:6d:a6:80:2b:55:80:2c:bb:ba: d4:fc:76:31:97:84:bd:c1:a3:4f:83:90:97:b1:51: 23:48:98:02:9b:09:23:83:b4:e9:3c:f4:33:0f:5a: 37:b2:f4:a0:d7:2a:c2:31:ed:5e:66:15:58:c8:be: 91:3b:b4:53:13:ac:98:41:19:6e:e5:53:db:4d:2d: d9:38:55:73:64:f5:c8:ac:20:50:6a:2f:af:7e:38: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:65:6C:98:49:F9:5D:65:AE:25:47:A2:FF:74:AD:24:4A:23:8B:87 X509v3 Authority Key Identifier: keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/S2VsmEn5XWWuJUei_3StJEoji4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.18.0/24 193.143.72.0/24 193.143.75.0-193.143.76.255 IPv6: 2a0f:8e40::/29 Signature Algorithm: sha256WithRSAEncryption 20:29:2d:97:45:30:78:2a:a9:fb:49:4f:ec:ce:86:5c:aa:08: cd:fa:35:5c:19:ac:34:52:83:40:5d:0e:82:b0:89:34:a9:ce: 86:a5:c4:d6:b5:70:19:f9:a1:3f:0f:cf:a7:b9:9d:ee:fa:d5: 82:ec:dd:c2:27:ec:39:08:5e:19:3c:92:67:11:3d:ad:ce:7e: e1:3c:75:cc:fb:56:50:90:2c:25:12:e9:ae:10:87:4e:ab:97: e4:c7:98:71:da:38:2b:fa:a5:72:47:a2:07:21:ed:1c:42:25: 61:4c:b4:bc:60:fd:03:23:84:2b:5a:4c:70:37:e3:f7:c9:28: 25:08:02:44:43:56:37:26:4b:f1:02:42:8a:f6:73:1c:86:a1: 98:48:23:d6:26:d8:4f:17:91:2a:ea:4c:a3:9b:f3:c4:e6:a4: bb:2d:56:9b:11:f6:db:ec:4d:5a:86:8f:61:36:ea:71:10:40: b0:2b:df:d6:77:09:11:f9:6b:46:b9:05:58:6b:55:a4:9c:d8: cb:54:29:f5:df:32:4c:52:d6:b9:2b:50:ed:fc:5c:4e:3d:40: 6a:ef:5e:39:15:c0:9a:26:9c:a2:81:52:b9:b3:a5:e2:5f:27: 15:da:fd:05:89:6d:4b:3c:18:7f:2c:42:ec:4b:1f:00:83:4d: 4f:29:42:cd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+OMPPuY4B0CcC9QbyfQxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNDNkZWQ3NDViMDVmNDAzOGU5ODNmYjlkNzhlZGY1NmYy NTEzNDYwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjY1NmM5ODQ5Zjk1ZDY1YWUyNTQ3YTJmZjc0YWQyNDRhMjM4Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1p5T5cET9dyvLdD/kwxe4Vs/BRi I9RaoMol/LdDAV0bnJp+vSech6hI0UWsMb1WiBnZeEdgoV3b0Xqqi2ZEcxrTXo0r xDIUfGNWNMcJANuK/1bPy51sKyQubTfRsDmZW1frxgzv9B6qN0rJoacBgpVmfwVy VVujAs6NOq55sBviC4d1V8DF9VBq+bqU5Euq8Zql9hmkz+eLpKkTfoLpa4ljm3Ff yd+ZHKptpoArVYAsu7rU/HYxl4S9waNPg5CXsVEjSJgCmwkjg7TpPPQzD1o3svSg 1yrCMe1eZhVYyL6RO7RTE6yYQRlu5VPbTS3ZOFVzZPXIrCBQai+vfjj+NwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEtlbJhJ+V1lriVHov90rSRKI4uHMB8GA1UdIwQY MBaAFFJD3tdFsF9AOOmD+5147fVvJRNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMt YzUzNmRmNWMyNzRlLzEvUzJWc21FbjVYV1d1SlVlaV8zU3RKRW9qaTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82NjMzZDUtODY3Ni00ZWM0LWEzZmMtYzUzNmRmNWMyNzRl LzEvVWtQZTEwV3dYMEE0NllQN25YanQ5VzhsRTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQAwY8SAwQA wY9IMAwDBADBj0sDBADBj0wwDQQCAAIwBwMFAyoPjkAwDQYJKoZIhvcNAQELBQAD ggEBACApLZdFMHgqqftJT+zOhlyqCM36NVwZrDRSg0BdDoKwiTSpzoalxNa1cBn5 oT8Pz6e5ne761YLs3cIn7DkIXhk8kmcRPa3OfuE8dcz7VlCQLCUS6a4Qh06rl+TH mHHaOCv6pXJHogch7RxCJWFMtLxg/QMjhCtaTHA34/fJKCUIAkRDVjcmS/ECQor2 cxyGoZhII9Ym2E8XkSrqTKOb88TmpLstVpsR9tvsTVqGj2E26nEQQLAr39Z3CRH5 a0a5BVhrVaSc2MtUKfXfMkxS1rkrUO38XE49QGrvXjkVwJomnKKBUrmzpeJfJxXa /QWJbUs8GH8sQuxLHwCDTU8pQs0= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:25 2026 by rpki-client